Operations Analyst

Start Date: 2011-08-01End Date: 2011-12-01

Support the management and retrieval of directorate information in support of our customer and other external customers. • Directly support the identification of information for inclusion in the customer proprietary databases, conducting complicated searches, preparing responses, analyzing, and advising the customer. Review multiple databases, conducting link analysis and data extraction. • Work is performed in a production based environment with monthly quotas and under tight deadlines. Turnaround times are often 24-72 hours. • Assist with office level information management programs and will assist with gathering, analyzing, and presenting data. • Applies current criteria and makes decisions on what information should be indexed and filed in the customer proprietary databases. • Experience researching and writing intelligence reports.

Cyber Analyst

Start Date: 2014-09-01

• Determine root cause of security incidents through the development of investigative steps and coordination with line of business security officer • Work daily with Business Information Security Officers (BISO) to determine remediation and prevention for threats • Conduct security incident investigations involving potential unauthorized exposure or loss of data belonging to Citi, Citi customers, and Citi employees • Prepare investigative reports, database entries, summaries and other documents in support of security incident investigations. • Evaluate remediation actions taken by various Citi business units to correct security incidents • Conduct assessments that determine the risk exposure faced by Citi, its customers and employees as a result of security incidents • Coordinates with the Legal and Compliance Departments to perform Risk Exposure Assessment on information security threats to Citi and its customers. • Follow pre-defined actions to handle BAU and high severity issues including escalating to other security support groups. • Proxy logs analysis and Data Loss Prevention (DLP) Reporting • Triage network intrusion and stolen laptops incidents

Intelligence Analyst

Start Date: 2002-12-01End Date: 2005-10-01

• Served as a member of a joint service analytical team as senior reporter; performed analysis; wrote and reviewed special intelligence product reports utilizing MESSIAH and SKYWRITER; oversaw on-the-job training for new analysts. • Worked with linguists to reference communication links between key targets of interests • Uses various intelligence databases such as ANCHORY and HOMBASE, on a daily basis • Develops target-specific intelligence on high interest activities in support of intelligence requirements • Developed high interest target profiles based on collection and relevance of overall mission • Used various networking strategies to obtain critical information for target biographies. • Performs research analysis and target development on national items of interest • Maintained accountability for all classified material located within the Watch Operations Center and maintained accountability for all personnel within operations. • Oversaw collection and reviewed intelligence reports from key targets while keeping the Watch Officer aware of imminent activity